MACs noble-hashes mac

KMAC256 Generator - High-Security Keccak MAC

Generate KMAC256 authentication tags - high-security Keccak-based MAC with 256-bit security per NIST SP 800-185.

kmac256.workspace
3 options
0 bytes UTF-8, Hex, or Base64 input
Options
Key *

0 bytes

Secure client-side computation. No data leaves your browser. Privacy Security

Result Output

What Is KMAC256?

KMAC256 is a Keccak-based Message Authentication Code defined in NIST SP 800-185, providing 256-bit security with variable-length output and customization options, combining Keccak efficiency with flexible output lengths.

Specifications

Output Size Variable
Standard NIST SP 800-185
Standard Year 2016
Origin Keccak submission to NIST SHA-3 competition
Origin Year 2008

Use Cases

  • High-security NIST-compliant authentication
  • Keccak-based high-security MAC
  • Long authentication tag generation
  • Maximum security domain separation
  • Post-quantum authentication preparation
!

Security Notice

KMAC256 is a keyed message authentication tool. Keep keys secret, use protocol-appropriate key sizes, and do not treat the output as encryption.

Related Tools

KMAC128 MACs HMAC MACs cSHAKE256 Hashes

Utilities

File Hash Verifier Verify local files against published checksums. Hash Compare Compare expected and actual digest values. Multi Hash Generator Generate common hashes from one input.

Guides

Algorithm Comparison Guide Choose the right primitive for each task. Hash Test Vectors Compare known outputs across common algorithms.

Implementation Notes

Practical usage details for this browser-based KMAC256 tool.

How to Generate a KMAC256 authentication code

  1. Choose UTF-8, Hex, Base64 input mode.
  2. Enter the text or encoded bytes you want to process.
  3. Adjust the KMAC256 options if your use case requires non-default settings.
  4. Click Generate KMAC256 Authentication Code and copy the result.

Example Input

Sample input:

abc

Use this sample input, then copy the generated authentication code from the result panel.

When Not to Use KMAC256

  • Do not use a plain hash or derivation output directly as password storage without the right password-hashing construction and parameters.

Recommended Alternatives

Review related tools when you need a different output size, security margin, or keyed construction.

Frequently Asked Questions